4 ms·
TLS is more than just encryption; it's also a mechanism that enables you to, in theory, verify that the content is from the source it says it's from.
by daigoba66 12y ago
TLS is more than just encryption; it's also a mechanism that enables you to, in theory, verify that the content is from the source it says it's from.
- CWuestefeld 12y agoAs I see it, that is actually the problem here. As things stand, if you don't have the resources to go through the process for proving your identity (or have other reasons for not wanting to do so) to establish the certificate, then you are unable to have encryption, or at least not without raising an error message in your users' browsers.
- nknighthb 12y agoThe cheap certificates are domain-controlled, meaning that "proving your identity" is just "proving control of the domain name", such as by clicking a link in an email sent to a listed whois contact address. If you can't prove control of the domain, you absolutely should not be issued a certificate for it under any circumstances.